CISSP Security Operations 5

Question 1

Which concept in security operations describes the process of proactively searching for threats that have evaded existing security controls?

Accepted Answer

Threat hunting

Answer

Threat hunting is a proactive, human-led activity that assumes compromise has occurred and searches for attacker activity not caught by automated tools.

Question 2

A company wants to ensure that a departing system administrator cannot retain access to any systems after their last day. Which process BEST addresses this?

Accepted Answer

Implementing an automated offboarding workflow that revokes all accounts and credentials upon HR termination

Answer

Automated offboarding tied to HR systems ensures immediate, comprehensive revocation of all access rights when an employee is terminated.

Question 3

What is the purpose of a Security Information and Event Management (SIEM) system's correlation engine?

Accepted Answer

Combining events from multiple sources to identify patterns that indicate a security incident

Answer

The correlation engine aggregates and analyzes events across disparate systems to surface attack patterns that individual log sources would not reveal alone.

Question 4

An organization stores backup tapes off-site. Which backup type copies only data that has changed since the LAST FULL backup, allowing for a two-tape restore?

Accepted Answer

Differential backup

Answer

A differential backup captures all changes since the last full backup, so restoration requires only the most recent full backup and the latest differential tape.

Question 5

Which principle ensures that security controls protect information at the level of its classification, regardless of where it resides or who requests it?

Accepted Answer

Tranquility

Answer

The tranquility principle in the Bell-LaPadula model states that security labels do not change while subjects are actively accessing objects, preserving classification integrity.

CISSP - Certified Information Systems Security Professional Practice Test

CISSP - Certified Information Systems Security Professional Practice Test

CISSP Security Operations 5